Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
82,160
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
622B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
Kind
What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.
Red flags
Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.
—
bobrnor/MailHog
Web and API based SMTP testing
MITSep 19, 2026 · metrics 2.10.0
—
bobrnor/MailHog-Server
MailHog Server
MITSep 19, 2026 · metrics 2.10.0
—
bobrnor/MailHog-UI
MailHog UI
MITSep 19, 2026 · metrics 2.10.0
—
bobrnor/storage
MailHog storage implementations
MITSep 18, 2026 · metrics 2.10.0
Go
brensch/assistant
All the things i need watching/doing
No licenseSep 19, 2026 · metrics 2.10.0
Go · npm
budimanjojo/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
carrots-sh/casa
Interactive package-manager front-end that keeps your Brewfile in sync
MITSep 17, 2026 · metrics 2.10.0
Go
cequenceai/icap
No repository description published.
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
PyPI
cesardraw2/swagger_meqa
Auto generate and run tests using swagger/OpenAPI spec, no coding needed
MITSep 19, 2026 · metrics 2.10.0
RubyGems
chatwoot/devise-secure_password
A password policy enforcement extension for devise.
MITSep 20, 2026 · metrics 2.10.0
—
chemist/ksonnet
A CLI-supported framework that streamlines writing and deployment of Kubernetes configurations to multiple clusters.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
chinaerserver/getty
a netty like asynchronous network I/O library based on tcp/udp/websocket; a bidirectional RPC framework based on JSON/Protobuf; a microservice framework based on zookeeper/etcd
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
chitoku-k/bosh_exporter
BOSH Prometheus Exporter
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
chrisns/sandbox-probe
Agentic sandbox enumeration: find security issues, and seed escape automation.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
chrissnell/polymur
A fast and flexible Graphite relay + HTTPS forwarder toolset
No licenseSep 19, 2026 · metrics 2.10.0
Go
chrisvaughn/f1viewer
🏎️ TUI for F1TV
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
chuangmaoye/sftp
SFTP support for the go.crypto/ssh package
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
Go
clambin/go-common
No repository description published.
No licenseSep 20, 2026 · metrics 2.10.0
RubyGems
cloudfoundry-attic/consul
Consul is a tool for service discovery, monitoring and configuration.
MPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
codegiveness/umans-gate
LLM capture proxy with Anthropic cache_control TTL stamping, vision handoff, concurrency gating, rate limiting, and a live inspection dashboard
MITSep 18, 2026 · metrics 2.10.0
Go
codemonstersteam/pinout-asyncapi
AsyncAPI 3.0 contract validator. A module of the pinout ecosystem for validating contracts between services based on their specifications.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
RubyGems
colmexdev/ratonvirus-clamby
Clamby scanner for Ratonvirus.
MITSep 20, 2026 · metrics 2.10.0
Go
const-tmp/gorm-cruder
Golang generic CRUD helper
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go
cryptopay-dev/narada
Golang application framework
MITSep 18, 2026 · metrics 2.10.0
Go
cryptopossum/fantom-api-graphql
Fast and secure GraphQL API for aggregated Opera block chain information.
MITSep 20, 2026 · metrics 2.10.0
Maven
cucumber/messages-java
[READ ONLY] Cucumber Messages for Java (Protocol Buffers) - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/messages
MITSep 19, 2026 · metrics 2.10.0
Go
cyradin/golang-evdev
Go bindings for the linux input subsystem
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
d2iq-archive/tf-kubernetes-configmap-backend
No repository description published.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
danquack/external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
daodaoliang/maddy
✉️ Composable all-in-one mail server.
GPL-3.0Sep 18, 2026 · metrics 2.10.0